This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa
File:                     3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa (raw, json)
Hash identifier:          X8l8yE7G8amXpIB5KJFWcipIfOJZZi7PdChaanQiaTQ=
Subject key identifier:   F7:6C:77:CE:D6:3C:8B:F9:B2:0D:36:71:0F:A0:80:10:07:45:41:C7
Certificate issuer:       /CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Certificate serial:       78A2FB044FDCA8CE1725F9BB4072C4567151C64A
Authority key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa
Signing time:             Tue 06 Jan 2026 19:25:12 +0000
ROA not before:           Tue 06 Jan 2026 19:20:12 +0000
ROA not after:            Tue 05 Jan 2027 19:25:12 +0000
asID:                     263728
IP address blocks:        131.72.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 05:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:fb:04:4f:dc:a8:ce:17:25:f9:bb:40:72:c4:56:71:51:c6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
        Validity
            Not Before: Jan  6 19:20:12 2026 GMT
            Not After : Jan  5 19:25:12 2027 GMT
        Subject: CN=F76C77CED63C8BF9B20D36710FA08010074541C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:e4:47:9d:b3:1e:cf:4e:fa:8d:d5:9f:0b:
                    82:0c:32:9b:5c:97:8f:1b:30:5b:84:24:56:44:9c:
                    25:01:90:73:8e:d8:bd:c7:72:51:d0:ae:b4:56:63:
                    4f:ea:2b:32:fe:e4:01:26:24:d3:08:56:d3:50:58:
                    40:0d:9b:1e:fa:ba:8e:66:45:7e:1d:a0:f2:a3:92:
                    0f:77:1e:34:b2:00:80:ec:7a:0d:5e:a9:59:62:aa:
                    37:8c:2a:b0:80:ab:c9:9f:2f:36:c4:91:75:d8:10:
                    10:1a:7f:64:a6:9b:f9:4c:ce:78:99:af:c3:55:f9:
                    d8:dd:a2:8d:37:ee:99:07:d6:02:8a:ee:97:52:20:
                    a3:6f:e1:39:bd:d5:14:36:70:23:db:6e:7f:37:95:
                    3f:8a:6c:40:50:38:7b:84:2c:af:49:45:b7:c1:a5:
                    38:1f:40:97:0a:e9:5e:e8:74:b4:49:da:9f:fd:89:
                    6e:fa:3f:7a:73:d3:8b:ef:96:82:14:28:30:ab:be:
                    a3:05:27:9d:c8:3e:7f:8f:96:dd:f5:9e:a5:93:e9:
                    03:58:f3:6e:d5:82:fd:00:42:a4:d8:81:27:5c:5e:
                    06:c7:ff:05:74:de:63:f0:0b:61:78:05:52:07:b1:
                    7c:25:f3:fb:81:bd:bc:39:e0:a1:4f:2e:fd:b7:fc:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:77:CE:D6:3C:8B:F9:B2:0D:36:71:0F:A0:80:10:07:45:41:C7
            X509v3 Authority Key Identifier:
                keyid:A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:49:b7:c6:2b:e0:9e:44:9d:04:7d:39:a2:97:64:af:e4:f4:
         6a:d5:38:64:27:01:68:0f:f5:02:aa:af:2f:8e:5b:32:dd:20:
         56:fb:56:f2:1d:e4:5f:b1:2a:2e:94:3e:80:14:a5:15:73:18:
         fc:82:a3:ba:0c:3f:43:76:41:de:5d:f0:db:8c:f1:a2:2b:ba:
         77:94:48:66:5f:00:54:5f:54:1a:f7:87:98:79:ee:24:27:5c:
         ba:3d:a3:71:a5:27:83:cd:78:6d:d8:e2:23:42:d0:3c:32:df:
         52:d6:54:d5:32:23:0d:78:39:c7:93:e8:72:f3:75:a2:b1:88:
         63:23:2c:e0:9a:5e:70:92:53:18:1e:84:ff:d6:53:81:50:e2:
         95:f7:cc:86:e6:96:2a:80:25:0d:6b:d7:5b:21:e7:fc:22:58:
         20:10:dc:47:53:b2:a9:9a:1d:c0:88:42:74:4d:b5:67:71:ef:
         d6:92:b2:bd:bc:32:d0:58:87:06:10:1a:e4:4f:e6:98:98:cc:
         ae:54:ec:f6:d3:b1:37:bb:46:9e:3d:30:c2:25:d4:e7:06:04:
         0d:16:a2:a8:59:89:54:dd:f4:26:84:24:4f:92:38:9f:06:87:
         a1:14:8b:60:ab:d4:49:0b:a4:6a:84:56:f5:57:d8:48:0f:84:
         28:91:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:04:03 2026 by rpki-client